Privacy Policy
Last updated: October 6, 2026
1. Scope and controller
This Privacy Policy explains how Hoob Studio processes information when you use Kelime Patlatma: Words Crush (the “Game”). Questions and privacy requests may be sent to destek@hoobstudio.com.
2. Information we process
- Account information: Firebase user ID and, if you choose Google, Apple, or email sign-in, your name and/or email address. Guest accounts use a pseudonymous Firebase user ID.
- Game and account data: game progress, level and interaction events, in-game balances, purchased themes/items, settings, and cloud-save data.
- Purchase data: product, transaction, and validation identifiers used to deliver purchases and prevent duplicate or fraudulent fulfilment. We do not receive or store your full payment-card details; payment is handled by Google Play or Apple.
- Advertising and technical data: IP address and approximate location inferred from it, device or advertising identifiers where permitted, ad and app interactions, operating-system/app version, diagnostics, performance data, and consent status.
- Crash and analytics data: crash reports, diagnostics, gameplay and resource events, and attribution data, only for adults who opt in to optional analytics as described below.
3. Neutral age flow
The Game is intended for users aged 13 and over. A neutral age screen asks for a date only to determine one of three bands on the device: child (under 13), teen (13–17), or adult (18+). The full date of birth is not retained or sent to our servers; only the resulting age band is stored locally.
For children and teens, optional analytics and attribution services (Firebase Analytics, Firebase Crashlytics, AppsFlyer, and GameAnalytics) are not started. Ad requests are configured with the applicable child-directed or under-age treatment and restricted content rating. Adults are offered a separate, optional analytics choice and can withdraw it at any time in the Game’s Settings.
4. Purposes and legal choices
- Provide authentication, guest access, cloud save, game features, support, and account management.
- Validate and deliver purchases and protect against fraud or duplicate fulfilment.
- Display and measure ads through Google AdMob. Where required, Google’s User Messaging Platform (UMP) requests and records your advertising/privacy choices before ads are requested.
- For adults who opt in, measure attribution and gameplay, diagnose crashes, and improve performance. This optional choice can be changed in Settings without losing access to core gameplay.
- Comply with law, enforce our terms, and protect the Game, users, and services.
5. Service providers
We use the following providers according to the purpose and choices described above:
- Google Play services, Google AdMob and UMP: store services, advertising, consent, measurement, and fraud prevention. Google Privacy Policy
- Firebase Authentication, Firestore, Analytics and Crashlytics: account access, cloud save, optional adult analytics, and optional adult crash reporting. Firebase Privacy and Security
- Apple services: Sign in with Apple, Game Center, App Store purchases, and store services on Apple platforms. Apple Privacy Policy
- AppsFlyer: optional adult-only attribution and campaign measurement, including device/advertising identifiers where permitted, app interactions, user ID, and approximate location inferred from IP. AppsFlyer Privacy Policy
- GameAnalytics: optional adult-only gameplay and session analytics, including gameplay events, technical/device identifiers, and approximate location inferred from IP. GameAnalytics Privacy Policy
6. Advertising and tracking choices
AdMob may process IP address, approximate location, app/ad interactions, diagnostics, and device or advertising identifiers for advertising, analytics, and fraud prevention. Consent choices and limited-ad settings may reduce identifier use, but contextual or limited ads may still process technical data necessary to deliver and secure ads. On iOS, cross-app tracking is requested only for an adult who opted into optional analytics/attribution, and only after the applicable privacy flow; denying App Tracking Transparency permission does not block core gameplay.
7. Retention and deletion
ou can delete your account in the game through Settings → Delete Account, or contact our support address if you cannot access the game. Once the in-game deletion request completes successfully on our server, your sign-in account and cloud game data are removed. Our commitment to process valid requests received by email within 30 days remains applicable. Direct account-identifying fields in purchase verification records are cleared during account deletion. A limited transaction marker is retained to prevent the same purchase from granting rewards twice. No automatic deletion period is currently configured for this marker. Our server's ordinary operation, error and security logs are retained for 30 days from the log entry date. Google Cloud's mandatory administration and system audit logs are retained for 400 days. These periods do not restart when an account is deleted. Firebase Crashlytics retains crash reports and related technical identifiers for 90 days before beginning removal from live and backup systems. Firebase Authentication removes relevant authentication information from its live and backup systems within 180 days after user deletion is initiated. According to the provider, Authentication's own logged IP addresses are retained for a few weeks. Scheduled Firestore backups and point-in-time recovery are currently disabled for our game database, and its Firestore backup list is empty. Service providers' own retention and deletion processes also apply. For other advertising and analytics services, see the provider descriptions and links in this policy.
8. Sharing, international processing, and security
We do not sell personal information. Data is sent to the providers above only to operate the Game, provide ads, measure optional adult analytics/attribution, process purchases, or meet legal and security needs. These providers may process data in countries other than yours under their contractual and legal safeguards. Data is encrypted in transit, and we use access controls and minimisation measures appropriate to the data processed.
9. Children’s privacy
Children under 13 are not our target audience. If a user is classified in the child band, optional analytics/attribution is disabled and child-directed ad protections are applied. If you believe a child’s personal information was processed contrary to this policy, contact us so we can investigate and delete it where required.
10. Your choices and rights
You may change optional analytics consent and open available advertising privacy options from Settings. Depending on your location, you may also have rights to access, correct, delete, restrict, or object to processing and to withdraw consent. Contact us at destek@hoobstudio.com.
11. Changes
We may update this policy when our practices or legal requirements change. The current version and effective date will be posted on this page.